A-PDF All to MP3 Converter 1.1.0 - Universal Local (SEH)

!/usr/bin/python Exploit Title: A-PDF All to MP3 Converter v.1.1.0 Universal Local SEH Exploit Date: September 18, 2010 Author: modpr0be Software Link: http://www.a-pdf.com/all-to-mp3/download.htm Version: 1.1.0 Tested on: Windows XP SP3 Open application -- Next -- Add -- blah.wav -- calc will po...

Get Tube - SQL Injection

Get Tube - SQL Injection ----------------------------------------------------------------------------------------- Get Tube 4.51 & All Versions SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Get Tube 4.51 & All Versions...

Joomla! Component CamelcityDB 2.2 - SQL Injection

Joomla! Component CamelcityDB 2.2 - SQL Injection ============================================================== Joomla Component comcamelcitydb2 SQL Injection Vulnerability ============================================================== Title : Joomla Component comcamelcitydb2 SQL Injection...

GetSimple CMS 2.01 Cross Site Request Forgery / Cross Site Scripting

Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF - Change Admin Password -= CSRF PoC 2 - Delete Page =- -= CSRF PoC 3 - Delete All Backup...

Sardus (index.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== Sardus index.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Getsimple CMS 2.01 - Multiple Vulnerabilities

Getsimple CMS 2.01 - Multiple Vulnerabilities Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download: http://www.box.net/get-simple --- -= CSRF PoC 1 - Change Admin Password =- GetSimple CMS 2.01 Multiple Vulnerabilities XSS/CSRF - Change Admin Password -= CSRF PoC 2 -...

GetSimple CMS v2.01 (XSS/CSRF) Vulnerabilities

Exploit for php platform in category web applications ============================================== GetSimple CMS v2.01 XSS/CSRF Vulnerabilities ============================================== Date: Mon 12 Jul 2010 12:11:45 PM EEST Vendor: http://get-simple.info/ Download:...

Google Chrome 5.0.375.99更新修复多个安全漏洞

BUGTRAQ ID: 41334 CVE ID: CVE-2010-2645,CVE-2010-2646,CVE-2010-2647,CVE-2010-2648,CVE-2010-2649,CVE-2010-2650,CVE-2010-2651,CVE-2010-2652 Google Chrome是Google发布的开源WEB浏览器。 Chrome的5.0.375.99版本更新修复了多个安全漏洞，用户受骗访问恶意网页就可能导致拒绝服务或完全入侵用户系统。 1 在使用WebGL时Chrome中可能出现越界读访问错误。 2 Chrome没有正确地隔离沙盒中的IFRAME元素。 3...

Find all writeable folder in filesystem linux polymorphic shellcode 91 bytes

Find all writeable folder in filesystem linux polymorphic shellcode - 91 bytes. Shellcode exploit for linux platform / Title : Find all writeable folder in filesystem linux polymorphic shellcode . Name : 91 bytes Find all writeable folder in filesystem linux polymorphic shellcode . Date : Sat Jun...

MakeMedia (newsdettaglio.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================================== MakeMedia newsdettaglio.php Blind SQL Injection Vulnerability ===============================================================...

RAVVIVA (news.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ==================================================== RAVVIVA news.php Blind SQL Injection Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'...

Padasoft (news.php) SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== Padasoft news.php SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...

WebDM CMS SQL Injection

WebDM CMS SQL Injection Vulnerability EDB-ID: CVE: OSVDB-ID: Author: Dr.0rYX and Cr3w-DZ Published: Verified: Exploit Code: Vulnerable App: . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ \ / \ || /\ /| || || / /\ / || ||\ / / / / / / /...

PageDirector CMS - Multiple Vulnerabilities

PageDirector CMS - Multiple Vulnerabilities Exploit Title : PageDirector CMS Multiple Vulnerabilities Date : 20 - 6 - 2010 Author : Tr0y-x Vendor : www.customerparadigm.com Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Price : 675.00 $ loooooolz -== SQL Injection Vulenrability =...

Sybase EAServer 5.2 - Remote Stack Buffer Overflow (Metasploit)

$Id: sybaseeaserver.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Can not UPDATE the "Viewable By" field of an issue

After the creation of an issue it is by default viewable by "All Users". It is not possible to change the value after re-editing that issue. After changing it and clicking the "Update" button, the viewable by entry stays "All Users"...

Cpanel Image Manager Local File Inclusion

Cpanel Image Manager Local File Include Exploit Author : AnTi SeCuRe TeaM : SauDi ViRuS TeaM Site : WwW.VxX9.Cc Email : [email protected] Version Of App : All Versions Tested on : Cpanel 11 Date : 2010-02-14 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= How To Exploit :...

OCS Inventory NG Multiple SQL Injection Vulnerabilities

This host is running OCS Inventory NG and is prone to multiple SQL injection vulnerabilities. OpenVAS Vulnerability Test $Id: secpodocsinventoryngmultsqlinjvulnmay10.nasl 5394 2017-02-22 09:22:42Z teissa $ OCS Inventory NG Multiple SQL Injection Vulnerabilities Authors: Madhuri D Copyright:...

MusicBox - SQL Injection

MusicBox - SQL Injection Exploit Title: musicbox sql injection Date: 1/6/2010 Author: titanichacker Software Link: http://www.musicboxv2.com Version: all versions Tested with: http://server/index.php?action=genre&id=2' http://server/index.php?term=achkl&in=album&action=search&start=0'...

RapidWareX 2.0.1 - 'WebUI' Cross-Site Request Forgery

RapidWareX v2.0.1 WebUI CSRF Exploit Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] RapidWareX v2.0.1 WebUI is prone to a post-authentication CSRF vulnerability, which allows the attacker to have control over certain...